CLAIM AMENDMENTS 



Claim Amendment Summary 
Claims pending 

• Before this Amendment: Claims 5, 6, 8, 19-20, and 24-41. 

• After this Amendment: Claims 5, 6, 8, 1 9-20, and 24-35, and 37-41 . 
Non-Elected, Canceled, or Withdrawn claims: 36. 

Amended claims: 25, 30, 34, 37-39. 
New claims: None. 



Claims: 

1-4. (Cancelled). 

5. (Previously Presented) A method as recited in claim 27 wherein a 
particular device is assigned to multiple groups. 

6. (Previously Presented) A method as recited in claim 25 wherein the 
one or more event handling policies identify the event data that are subscribed by the 
plurality of event consumers. 

7. (Cancelled). 
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8. (Previously Presented) A method as recited in claim 25 wherein the 

method is implemented by a management module. 



9-18. (Cancelled). 



19. (Previously Presented) One or more computer- readable media as 
recited in claim 31 wherein a particular device is assigned to multiple groups of devices. 



20. (Previously Presented) One or more computer-readable media as 
recited in claim 30 wherein the one or more event-handling policies further identify the 
event data that are subscribed by the plurality of event consumers. 



21-23. (Cancelled). 



24. (Previously Presented) A method as recited in Claim 28, wherein the 
event log further coiiiprises a version of an operating system, a location in a geographic 
region, a configuration of the system, presence of a particular hardware item, or capacity 
of a particular hardware item. 



25. (Currently amended) A method [[for]] of providing a centralized collection 
and event data handling mechanism in a Window Management Instrumentation (WMl) 
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environment an enviromnent supported b y Windows - Management Instrumentation 
(WMI) technology for collecting and handling event data , the method comprising: 

receiving all event data generated and represented in a common event data fonnat 
by a plurality of event providers comprising at least a first and a second event provider in 
a network, the first and second event providers being different from each other, the 
plurality of event providers comjjrising components and applications of different types in 
the network; 

determining, in accordance with one or more event handling policies, which of a 
plurality of event consumers handle the received event data, the plurality of event 
consumers comprising at least a first and a second event consumer, the first and second 
event consumers being different from each other, the plurality of event consumers 
comprising components and applications of different types in the network; and 

sending the event data to the plurality of event consumers for direct handling by 
the plurality of event consumers without altering the common event data format in which 
the event data is represented compris ing th e first a nd second event con s umers ; 

wherein; 

an extensible common information model (CIM) is utilized to encapsulate 
managed objects, the managed objects comprising each of the plurality of event 
providers and each of the plurality of event consumers in the WMI environment: 

the CIM is defined by a Managed Object Format (MQF) language and the 
CIM is implemented by one or more WMI classes: and 
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the common event data format is implemented by the one or more WMI 
classes to encapsulate all event data from the managed objects 

the plurality of ev e nt provider s c om p rising the first and second event 
provider and the p lurality of event consum e rs comprising the first and s e cond 
event consumer are represented by an exten&ible - eemmon information model 
(CIM) that encapsulates all the components and applications in the network; and 
wherein the event data - is transmitted in a common event data format from the 
plurality of event p roviders to the plurality of event co nsumers via a common interface 
that supports the common even t data fomtat, the common event data fonnat being 
configured to encapsulate-aU event data from the plurality^ of different event providers 
including the first and second event provide rs and be supported by the plurality of 
different event consumers - ine - lu ding the first and second event consumers . 



26. (Previously Presented) A method as recited in claim 25, further 
comprising: 

creating the one or more event handling policies at least in part on the basis of a 
plurality of inquiries subscribing the event data from the plurality of event consumers. 



27. (Previously Presented) A method as recited in claim 25, further 
comprising: 

assigning a plurality of devices to a group, the assigned devices each having a 
common state as other devices in the group; and 
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assigning one or more event handling policies to the group, wherein the assigned 
policies are associated with each of the devices in the group. 

28. (Previously Presented) A method as recited in claim 25, further 
comprising: 

creating an event log, the event log comprising one or more event handling policy. 

29. (Previously Presented) A method as recited in claim 26, wherein the 
creating comprises merging a plurality of event handling policies to a single combined 
event handling policy. 

30. (Currently amended) One or more computer-readable media having stored 
thereon a computer program that, when executed by one or more processors, performs 
[[the]] a process of i^roviding a centralized collection and event data handling mechanism 
supportcd - by - Windews Management Instrumentation (WMI) technology in a Window 
Management Instrumentation (WMI) environment , the process comprising: 

receiving all event data generated and represented in a common event data format 
by a plurality of event providers comprising at least a first and a second event provider in 
a network, the first and second event providers being different from each other, the 
plurality of event providers comprising components and applications of different types in 
the network; 
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determining, in accordance with one or more event handling policies, which of a 
plurality of event consumers handle the received event data, the plurality of event 
consumers comprising at least a first and a second event consumer, the first and second 
event consumers being different from each other, the plurality of event consumers 
comprising components and applications of different types in the network; and 

sending the event data to the plurality of event consumers for direct handling by 
the plurality of event consumers without altering the common event data format in which 
the event data is represented ee mprising the first and second event consum e rs ; 

whereim 

an extensible common infomiation model (CIM) is utilized to encapsulate 
managed objects, the managed objects comprising each of the plurality of event 
providers and each of the plurality of event consumers in the WMl environment: 

the CIM is defined by a Managed Object Format (MOF) language and the 
CIM is implemented by one or more WMI classes: and 

the common event data fomiat is implemented by the one or more WMl 
classes to encapsulate all event data from the managed objects 

the plurality of event providers comprising the first and gccond event 
p r ovid e r and the plurality of event c o nsum e rs comprioing th e fir s t and second 
event consume r are represented by an extensible comm o n inf o nnation model 
(CIM) that encapsulates all the compone nt s and applications in the network; and 
wherein the event data i s transmitted in a comm o n e v e nt data format from the 
plurality of event providers to t h e plurality of event consumers via a common interface 
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that supports the cemmoii - gv ^ ent data format, the common event data format being 
configm'ed to cneapsulate all event data from the p l uraUty of different event providers 
including the first and second e\'ent prav - iders and be supported by the plurality of 
different event consumers inc - luding th e first and second event consumers . 

31. (Previously Presented) One or more computer-readable media as 
recited in claim 30, further comprising the process of: 

assigning a plurality of devices to a group, the assigned devices each having a 
common state as other devices in the group; and 

assigning one or more event handling policies to the group, wherein the assigned 
policies are associated with each of the devices in the group. 

32. (Previously Presented) One or more computer-readable media as 
recited in claim 30, further comprising the process of: 

creating the one or more event handling policies at least in part on the basis of a 
plurality of inquiries subscribing the event data from the plurality of event consumers. 

33. (Previously Presented) One or more computer-readable media as 
recited in claim 30, further comprising the process of: 

creating an event log associated with the group, the event log comprising one or 
more event handling policies. 
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34. (Currently amended) A system ler of collecting and handling event data in a 
centralized mechanism support e d by in a Windows Management Instrumentation (WMI) 
environment technology , the system comprising: 

one or more processors; 

memory communicated with the one or more processors; and 
one or more data stores having stored thereon a management module, when 
executed by the one or more processors, perforaiing [[the]] a process comprising: 

receiving all event data generated and represented in a common event data 
fomiat by a plurality of event providers comprising at least a first and a second event 
provider in a network, the first and second event providers being different from each 
other, the plurality of event providers comprising components and applications of 
different types in the network; 

determining a meta-policv from a plurality of WMI nolicies as to 
accordancfr^v - ith one - or more event handli ng policie s^ which one or more e f - a plurality of 
event consumers handle the received event data, the determining comprising: 

associating each of the plurality of WMI policies with at least one of 
the one or more event consumers, wherein each of the j^Iurality of WMI policies 
includes information loiown to the one of the one or more event consumers: and 

creating a meta-policv to control applying the plurality of WMI 
policies to the one of the one or more event consumers, wherein the meta-policv is 
configured to control the applying by preventing the applying while checking the 
plurality of WMI policies for conflicts 
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the plurality of event consum ers co mprising at least a first and a 
se e end event consumer, the first a nd second event consumers being different from 
each other, the plurality of event consumers comprising components and 
applications of different types in the netu^ork ; and 

sending the event data to the 0 liiralit - Y - of one or more event consumers for 
direct handling by the plurality of event consumers vyithout altering the common event 
data format in which the event data is represented based on the meta-policy comprising 
t - he - fi - r -s- t - ^nd -s econd e\^ent consumers ; 
whereim 

an extensible common information model (CIM) is utilized to encapsulate 
managed objects, the managed objects comprising each of the plurality of event providers 
and the one or more event consumers in the WMI environment; 

the CIM is defined by a Managed Object Format (MOF) language and the 
CIM is implemented by one or more WMI classes: and 

the common event data fomiat is implemented by the one or more WMI 
classes to encapsulate all event data from the managed objects 

t - he plurality o f event providers compr isi ng the first and second event 
provider and the plural ity of e v e nt consumers comprising the first and second 
e \ ^ ent c o n s umer are represented by an extensible c o mmon information model 
(CIM) that en c ap s ulates all the components and applications-i - n - the network; and 
wdierein the e\^ent data is transmitte d in a c ommon e\'ent data format fro m th e 
plurality of event provid ers to the plurality of event consumers - via a common interface 
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tlKtt - sup pe rts the - eommon e\^ent data format, the common event data f ormat being 
configured to encapsulate all event data fro m t he plu r ality of different event providers 
including the first and seco nd event providers and be supported by the plurality of 
different event consumers - including the first and second event con s umers . 

35. (Previously Presented) A system as recited in claim 34, further 
comprising a plurality of devices, the devices being coupled to the management module. 

36. (Cancelled). 

37. (Currently amended) A system as recited in claim 35, wherein the plurality 
of devices are assigned to a group, and the meta-policy is m e- ep more - event handling 
policies are assigned to the group. 

38. (Currently amended) A system as recited in claim 37, wherein the meta- 
policv one or more e\^Ht - handling policies assigned to the group [[are]] is associated with 
each of the plurality of devices in the group. 

39. (Currently amended) A system as reciting to claim 34, wherein the meta- 
policy is one - ermere event handling policies are created by merging [[a]] the plurality of 
event handling WMI policies. 
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40. (Previously Presented) A system as recited in claim 34, further 
comprising: 

a database configured to store the event data, the database being coupled to the 
management module. 

41. (Previously Presented) A system as recited in claim 34, further 
comprising; 

an event log configured to administrate the one or more event handling policies, 
the event log being coupled to the management module. 
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